Re: When to do Return Routability Checks

 In your previous mail you wrote:

   > => we need more flexibility about moving the SA: to wait the 
   > RR check result is fine only when the previous peer address 
   > is still usable.

=> there are two cases when we move from peer address A to peer address B:
 - peer address A is still usable: the IKE SA should be updated
   only after the end of the RR check
 - peer address A is no more usable (the usual case with mobility):
   the IKE SA (but not IPsec SAs) should be updated at the reception
   of the update request
Two details:
 - there is scenario where ASAP update is mandatory: imagine an window
   of one message is used and there is a pending request to send: if
   it is sent to the peer address A and this address no more works
   the exchange will never finish.
 - now how to know when an address is no more usable: with my address
   management framework the initiator wll simply remove it from the set.

Thanks

[email protected]